Technical Information
- %TEMP%\b78b.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\b78b.tmp' --ping<Full path to file> 6972B78D086BCD8FFC005FE4EE0CFD43C719CF0F7A3F5BBB198F806ADCE823E1AC055CDD59CADFAF966B64D54000BB8A8F8BA77ADB8B854788EE09DA0F732E91
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"
- '%TEMP%\b78b.tmp' --ping<Full path to file> 6972B78D086BCD8FFC005FE4EE0CFD43C719CF0F7A3F5BBB198F806ADCE823E1AC055CDD59CADFAF966B64D54000BB8A8F8BA77ADB8B854788EE09DA0F732E91' (with hidden window)